ICS pain in my ass

[jeremy1701]

I realize that 10.0 seriously changed the internet connection wizard from 9.2. In 10.0, it sets it up using Squid. I don't want to use a proxy. Here's my setup

box1 eth0 - 192.168.0.1
eht1 - DHCP Cable modem

box2 192.168.0.2
box3 192.168.0.3

I like Shorewall and am fairly comforable with it, the problem I have is in IP-Chains. Can I simple remove the forward to Squid and if so how? Should I just forward everything, and if so how? Is that secure?

Thanks,
Jeremy

[sarumont]

You should be able to remove the rule telling it to forward to squid with no adverse affects other than your connection not working. Then all you'll have to do is enable forwarding. Typically, you would only allow connections with the ESTABLISHED or RELATED states (using the -m switch in your iptables rule).

[jeremy1701]

Solved using kpzanis's fantastic tutorial:

http://linuxforums.org/forum/viewtop...=114646#114646

Jeremy